Privacy Policy

Last updated: November 1, 2026

MiddleSpot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains what we collect when you use the MiddleSpot app, its App Clip and our websites, why, and what you can do about it. It is the same policy on iPhone, Android and the web.

Our Privacy-First Approach

MiddleSpot is built with privacy at its core. Nothing you write reaches another person unless you chose it, and that limit is enforced on our server, not only in the app. We collect only what the app needs to work, we never sell it, and we show no ads.

Information We Collect

Information You Provide

• Name and Nickname: Your first name comes from your Apple or Google account, or you type it if you sign in by email, and you can change it. A nickname is optional. People you share a journal, a table or a card with see your name or nickname.
• Birth Year: Asked once when you set up the app, to check that you are at least 13. It is stored with your account, so a new phone does not ask again, and it is never shown to anyone. A year that makes you under 13 is also kept on your device, so the check cannot simply be retried.
• Your Pages and Answers: What you write for yourself: answers to questions, pages written freely, your weekly question and the cards you save.
• Journal Entries: What you write on a journal's shared pages, and the hearts you leave on other members' entries. The other members can read an entry once its page opens.
• Cards You Send: When you send someone a card to answer: the question, your name, and the answers you each write.
• Answers Written Before You Have an Account: If someone sends you a card or invites you to a journal, you can answer from the link without an account, on the web (an mspt.app page) or, on iPhone, in the MiddleSpot App Clip (see below). Your first name and your answer are checked by our safety service and stored against that link until you claim them by signing in to the app. If you never do, they are deleted automatically after the link expires.
• Reports, Blocks and Mutes: When you report something, block someone or mute a member of a journal, we keep a record of it, and a report includes a copy of what was reported.

Information Collected Automatically

• Location (optional): If you allow it, when you meet someone in person (hosting or joining a table, or scanning a code), we record the city or neighbourhood, such as "Montreal, Canada". A code typed in by hand records no location. We never store your exact position (see Location Privacy).
• Weather and Time of Day: With the same permission, the weather at that moment (for example clear or rainy), a temperature category and the temperature in Celsius. Every meeting records the time of day.
• Voice Recordings (temporary): When you speak an answer instead of typing it, the recording is sent to our transcription service and deleted once it has been written down. Only the text you then choose to save is kept.
• Push Token: If you allow notifications, your device's push token, so we can tell you when a journal's page opens, an entry is revealed, someone invites you or asks to join, a chapter is ready, or a meeting is worth remembering.
• Crash and Error Reports: Through Sentry, so we can fix bugs. Sentry's collection of personal data is switched off (no IP address or device identifiers), and our code never sends it your name or anything you wrote. On iPhone, sign-in tokens, email addresses and link codes are also removed from any message before it is sent.
• Security Logs: Purchase and rate-limit events (the event, the time and your account ID), to detect fraud and abuse. Never your name or anything you wrote.
• Card Counts: For each card in the decks, how many times it is skipped, saved and sent, in total. No account, device or other identifier is attached, so these counts cannot be traced back to you.
• Why People Leave: When you delete your account, you can tell us why in one tap. It is stored as a fixed choice, with no account or other identifier attached.

How We Store Your Information

On Your Device

MiddleSpot keeps a copy of what you use on your phone, so it works quickly and offline: your pages and answers, saved cards, the tables you played and their questions, drafts, and settings such as language, tone and your icon finish. Deleting the app removes this copy.

On Our Servers (Supabase)

So that your journals follow your account and the people you write with can read what you share, we store the following in our database, hosted by Supabase:

• Your Account: Your name, nickname, birth year and notification settings.
• Your Pages and Answers: A copy of everything you write for yourself, kept in step with your device. It brings your journals back when you sign in on a new phone. Nothing at a table reads it, and nobody else sees it. Editing or deleting a page updates this copy.
• Journals: Their members, pages, questions and pace; your entries and hearts; chapters and the card that ends each one; your choice about cards; and your monthly reads and the reads you ask for.
• Meetings: A record of each table: who took part, the questions that were played, and the place, weather and time if they were recorded.
• Liked Questions at a Table: The questions you have liked (up to 30, the newest first), stored with the table so that its questions can be written, and deleted automatically 24 hours after the table expires. Joining a table is what sends them. Your answers and entries are not sent to a table, and the questions you saved to answer later are not either.
• Join Codes: Random values with no personal information that let someone join your table or prove that two people met. They expire after a short time.
• Invitations and Sent Cards: The links you create, who has joined through them, and answers written before an account (see above).
• Sign-in: Managed by Supabase Auth. Your session is stored securely on your device.
• Push Token: Your device's push token, if you allowed notifications.
• Safety Records: A digest of text that passed our safety check (not the text itself), kept for 60 days; reports, with a copy of what was reported; who you have blocked or muted; and security logs.
• Premium Status: Whether you subscribe, written by RevenueCat when you buy, renew or cancel. We never see your payment details: the App Store or Google Play handles payment.

Everything is sent over HTTPS, and our database checks on every request that you are allowed to see what you ask for.

How We Use Your Information

We use your information only to run MiddleSpot:

• Create and manage your account, and check your age
• Keep your journals, open pages on their schedule, and reveal entries once everyone has written
• Let you play a table of questions with other people, made from the questions people liked
• Write a table's questions, chapters and the card that ends each one, monthly reads, the reads you ask for and your private reading (see AI Processing)
• Record where, when and in what weather you met someone, if you allowed it
• Send the notifications you allowed
• Check names, questions and shared entries for harmful content, act on reports, and prevent abuse
• Process subscriptions
• Fix crashes and errors
• Learn which cards work, from anonymous totals

AI Processing

Some of what MiddleSpot writes for you is generated by OpenAI, through our server. OpenAI's key never leaves our server, and nothing is sent to OpenAI from your phone.

A Table of Questions

When you play at a table, the questions each person has liked are read on our server and sent to OpenAI to write the table's questions. Nothing else about anyone is sent: no answers and no entries. No phone receives anyone else's liked questions. What comes back is a set of questions: it never names or quotes anyone.

Your Private Reading

Written from your own answers only, and shown only to you.

Chapters and Monthly Reads

A chapter is written for a journal's members from the entries on its open pages. At the end of a chapter a card may be written from the pages it covers, to bring up the next time you are together. It is made on our server and sent to OpenAI like the chapter, it can quote nothing and names only members, and it is readable only by members who answered every page it used. A journal has a switch for each member, "Let this journal deal cards about me": when it is off, your entries are left out of the card and you are not named in it. Anyone can report a card. Your monthly read, and any read you ask for, is written from your own entries only (for a read you ask for, those of the last 30 days), for you alone. Asking for one sends those entries to OpenAI in the same way.

Voice Transcription

When you speak an answer, the recording is sent to OpenAI's Whisper through our server. The text comes back into your answer for you to read over and edit, the recording is deleted from our server and your device, and only the text you choose to save is stored.

Safety Checks

Names, nicknames, journal names, your own questions, entries on shared pages, and answers written on the web or in the App Clip are checked by OpenAI's moderation service before they are saved. Generated text is checked the same way. Pages only you can read are not checked.

OpenAI processes this data under its API terms, which say it is not used to train their models.

What Other People See

Nothing you write reaches another person unless you chose it:

• In a Journal: Its members see your name, whether you have written, your entries once a page opens, and your hearts.
• At a Table: The others see your name or nickname. They never see which questions you liked, and never an answer you wrote.
• With a Card You Send: The person you send it to sees your name and the question, and each of you sees the other's answer once both are written.
• Pages You Write for Yourself: Nobody sees them but you.

Information Sharing

We do not:

• Sell your personal information
• Share your data with third parties for marketing
• Track you across other apps or websites
• Show ads or build advertising profiles

The services listed under Third-Party Services process data only to provide their part of MiddleSpot.

Meeting Someone at a Table

The code on your table (the QR code, the code you read aloud and the link) only lets someone join your table. It carries no answers. The code read aloud changes every two minutes, and nobody can join once the table has started. A personal code from an older version of the app carries only your account ID (a random identifier), your first name and a single-use key, encrypted, and works once.

The App Clip

On iPhone, opening a journal invitation or a card someone sent you may offer the MiddleSpot App Clip: a small part of the app that runs without installing it, so you can answer before deciding to get the app. It has no account and no sign-in.

• It shows the question and who sent it, and sends the first name and answer you write to our server, through the same mspt.app service the web page uses. There they are checked by our safety service and held against the invitation, as described above.
• It does not ask for your location, camera, microphone, contacts or notifications. It includes no crash reporting, no analytics and no tracking.
• It keeps two things on your iPhone: a random code that lets it show you your answer again if you come back to the same link, and the link's code (not your answer) in storage shared only with the MiddleSpot app, so the app can pick up the invitation once you sign in. The app deletes that code as soon as it has read it, and ignores it after 14 days.
• iOS removes an App Clip, and what it kept, if you do not use it for a while. Deleting it yourself does not delete an answer already sent: that is removed when the link expires unclaimed, or with your account once you have claimed it.

Location Privacy

If you allow location:

• We only use it while the app is open
• Only when you meet someone in person: hosting or joining a table, or scanning a code
• To name the place and look up the weather, your phone's coordinates are sent to its built-in place lookup and to a weather service (Apple WeatherKit on iPhone, OpenWeatherMap on Android). They are used for that lookup and not stored
• We store only the city or neighbourhood, never your exact position
• You can turn location off at any time in your device's settings

Your Rights and Choices

You can:

• Edit or Delete What You Wrote: Rewrite or delete the pages you wrote for yourself, and rewrite your journal entries, from the page itself. Your journal entries are deleted with your account.
• Leave a Journal: Leave any journal at any time. The person who started a journal can end it.
• Delete Meetings: Remove a meeting from your phone. The other person keeps their own record of it, so the shared record stays on our server for them.
• Block, Mute and Report: Block someone, mute a member of a journal, or report anything shared with you.
• Take a Copy: Back up writes a file of everything you wrote or were given, encrypted with a passphrase you choose. It is saved where you choose and never sent to us.
• Turn Off Permissions: Turn off location, notifications, the camera or the microphone in your device's settings.
• Ask Us: Email us to ask what we hold about you, or to correct it.
• Delete Your Account: Permanently delete your account (see below).

Data Deletion

You can delete your account from inside the app:

1. Open MiddleSpot and go to the Account tab
2. Scroll to the end and tap Delete account
3. Read what will happen, tick the box and confirm. We delete your account on our server first, and clear your phone once that is done

No longer have the app? Email gate@middlespot.app with the subject "Account Deletion Request" and we will complete the deletion within 7 days.

Deleting the app does not delete your account. If you subscribe, cancel in the App Store or Google Play first: they keep billing until you do.

What others keep: in journals you share with others, your name is replaced by "Former member" and the other members keep what was written to read. Journals you started end for everyone and stay readable. Journals you joined carry on without you, and a journal of two ends when you go. People you met keep their own record of meeting you. Security logs are kept without your account ID.

A member who made a backup before you left keeps the entries you wrote to them in that file. It is encrypted with their passphrase and never stored by us.

If you signed in with Apple, deleting your account also revokes the Sign in with Apple token, so MiddleSpot no longer appears in your Apple ID settings.

Authentication

You can sign in three ways (on Android, with Google or by email):

• Sign in with Apple (iPhone): Apple gives us your name and an email address, which can be a private relay address. Apple's privacy policy applies.
• Google Sign-In: Google gives us your name and email address. Google's privacy policy applies.
• Email: We send a one-time code to your inbox; entering it signs you in. No password is created or stored.

Apple and Google sign-in use OAuth 2.0 with a one-time nonce. Your session is stored in your device's secure storage.

Third-Party Services

Our Websites

middlespot.app and mspt.app use no cookies, analytics or trackers. They remember your language choice and, on an invitation page, the code that lets you see your answer again, in your own browser only. Our host, Vercel, keeps standard request logs (such as IP address and time) to run and protect the sites.

Children's Privacy

MiddleSpot is for people aged 13 and over. We check age by birth year when you set up the app, and we do not knowingly collect information from children under 13. If you believe a child under 13 is using MiddleSpot, email us and we will delete the account.

Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top says when it last changed, and we will tell you about significant changes in the app or by email.

Contact Us

Meaningful connections, privacy protected.